ChatGPT can now pay for things. Make sure your site lets it in

On Friday, November 13, OpenAI introduced ChatGPT Wallet, built with American Express, Mastercard and Visa. It lets an AI agent pay a business on your behalf without ever seeing your real card number. You add a card once. Before each purchase, you review the items, the total and the card, then approve it with a security check such as Face ID or a fingerprint scan.

After you approve, the payment network issues a payment token: a stand-in card number with its own security code and expiration date. The store charges that token, and the payment lands on your selected card without the store ever seeing your real card details. OpenAI says shoppers keep their card rewards and their protections for eligible disputes, and the business keeps the customer relationship, the pricing, the fulfillment, the returns and the customer service.

The rollout is small on purpose. Wallet starts inside dots, where a user's dot can complete purchases for them, and only for ChatGPT Pro subscribers in the US who are 18 or older and have an eligible US-issued card. OpenAI says it is starting with limited availability to learn from real use, then expand with businesses, banks and card networks.

OpenAI says 1.2 billion people use ChatGPT each week, and many of them already use it to research products, compare options and decide what to buy. With Wallet, a ChatGPT agent can now finish that trip and pay, which means your checkout may soon be talking to a robot holding a human's permission slip.

Adobe's 2026 holiday forecast shows how fast that door is opening. AI-driven traffic to retail sites grew 127% year over year in August 2026, and Adobe expects 130% growth across November and December, with 141% on Thanksgiving Day. Adobe also found that 69% of shoppers say they are less likely to return an item they bought with an AI assistant's help. For a retailer, that 69% is the number worth noticing.

OpenAI is unusually candid about the weak spot. In Friday's announcement, it says some sites "may unintentionally block purchases" made through ChatGPT Wallet. The agent access guide explains why: for some tasks, ChatGPT uses a browser running on a computer in the cloud, and that browser reads pages, clicks buttons and fills out forms for the user. Security tools built to stop bots can mistake it for one.

The second weak spot is fraud screening. OpenAI's payments guide says risk systems often judge a visitor by IP address and browser details, so the cloud browser can trip them by accident and a real customer's order fails. OpenAI is rolling out support for passing the shopper's own signals, such as country, time zone and network, in a standard web header called Forwarded, and it suggests asking your risk provider to read it. The Wallet announcement adds that OpenAI is working with Forter, Riskified, Sardine and Signifyd on fraud, and with Adyen, Checkout.com and Stripe on payments.

And you do not need a Wallet-specific integration. The payments guide says Wallet works with existing checkout pages and payment forms, and the business receives a network token instead of the full card number. The customer consents to one purchase only, so the guide tells businesses not to save that token or reuse it for another order.

Baymard Institute averaged 50 studies and puts the documented cart abandonment rate at 70.22%, roughly seven of every ten carts. Among US shoppers who left for a reason other than just browsing, 40% said extra costs like shipping, tax and fees were too high, 19% did not trust the site with their card details, 18% balked at creating an account and 10% had a card declined.

Wallet goes straight at the trust problem, since the store never sees the real card number. Sign in with ChatGPT, which sits in the same partner playbook, goes at the account problem. The declined card is the one a business can cause all by itself: an agent's purchase stopped by your own fraud filter is a sale you paid to attract and then turned away at the register.

The partner playbook is written for anyone who sells or books online. It describes a customer comparing offers, choosing a time and deciding whether to buy or book, and the agent access guide lists filling out a form as one of the jobs people hand to ChatGPT. If customers request a quote or book an appointment on your site, the same firewall question applies to that page.

You also don't need to build anything fancy to be ready. The playbook says browser use follows your existing website flow and does not require a significant engineering lift. A plugin takes more work and gives you more control, so it can wait until you see real agent traffic.

Friday's launch is small. But OpenAI already has three card networks involved and a playbook for businesses that sell online. Every purchase gets its own token. OpenAI says it plans to expand availability, and the businesses that check their firewall and fraud settings before then won't be turning away customers who show up ready to pay.

If you want help checking where AI shoppers could get blocked on your site, our founders can walk through it with you. Talk to them below. See you in the next edition.